FTNT NSS Labs Test Report_r3.indd - IT

TEST REPORT
TEST REPORT: NSS LABS NGFW TEST
FORTIGATE 3600C,
1500D, FORTIOS V5.0
How Do You Identify the Best NGFW?
There are a number of next generation firewalls to choose from in
the marketplace today. How do you choose the one that’s right for
you? Don’t rely on vendor claims; take a look at real-world test results
performed by independent industry experts. Which vendors really
deliver the security, performance and price you need? And which
just say they do?
Highlights
n
Received NSS Labs
“Recommended” rating
n
Industry best value (price per
protected Mbps throughput)
n
High quality NGFW security
effectiveness
n
Exceptional NGFW performance
n
Passed 100% of stability and
reliability tests
“Integrating the FortiGate-1500D
with the Active Directory
implementation was simple
and intuitive,” according to the
NSS Labs report. “Testing verified
that the FortiGate-1500D correctly
enforced complex outbound and
inbound policies consisting of
multiple rules, objects, and
applications. NSS engineers
verified that the device successfully
identified the users and groups
and took the appropriate
action based upon the
firewall policy.”
1
TEST REPORT: NSS LABS NGFW TEST
The Independent Test Result
NSS Labs (hands-on, real-world testing) invites all vendors
claiming to provide next generation firewalls to submit their
products for annual testing at no cost.
Fortinet FortiGate 3600C and FortiGate 1500D both earned
NSS Lab’s Recommended status for security effectiveness
and performance. Both models also demonstrated the best
price per Mbps of throughput position in this year’s NSS Labs
Security Value Map.
NSS Labs found that both the FortiGate 1500D and 3600C
maintained high exploit block rates – blocking 97% and
98.3% respectively of attacks against server applications.
Both models passed 100% of tests gauging stability and
reliability, while detecting all of the 12 given anti-evasion
techniques and enforcing all security policies.
The FortiGate 3600C delivered exceptional next generation
throughput of 17,050 Mbps, the FortiGate 1500D delivered
9,597 Mbps.
The 1500D in particular, at 9,597 Mbps and $6/Mb
Protected, delivered nearly 5x Next Generation Performance
and TCO of the average $22/Mb Protected.
Product
Exploit
Block Rate1
94.1%
Fortinet
FortiGate 1500D
FortiOS v5.0
Fortinet FortiGate 1500D
Evasions
Stabililty &
Reliability
PASS
PASS
NSS-Tested Throughput
Product
9,597 Mbps
Fortinet
FortiGate 3600C
FortiOS v5.0
Fortinet FortiGate 3600C
Evasions
Stabililty &
Reliability
PASS
PASS
Application
Control
PASS
Identity
Aware
PASS
Firewall Policy
Enforcement
PASS
Exploit
Block Rate1
96.3%
NSS-Tested Throughput
17,050 Mbps
Application
Control
PASS
Identity
Aware
PASS
Firewall Policy
Enforcement
PASS
Get the full NSS Labs NGFW reports here.
Consider adding our NSS Labs Recommended Breach
Detection System to your NGFW solution.
Product
Breech
NSS -Tested Throughput
Detection
Fortinet
99.0%
1,000 Mbps
FortiSandbox
3000D v1.2
HTTP
Email
Exploits Stability Evasions
Malware
Malware
and
Reliability
99%
98%
100%
PASS
83%
FortiSandbox 3000D
Highlights
False Positive
Rate
0%
Read the full report on Fortinet’s FortiSandbox –
an NSS Labs Recommended Breach Detection System here.
n
Unique dual-level sandbox
n
Proactive antimalware pre-filter
n
All protocols , all analysis functions, one appliance
n
Up to 28 VMs supported (estimated 16,000 files/day)
n
Integrates to extend FortiGate/FortiMail/FortiClient
GLOBAL HEADQUARTERS
Fortinet Inc.
899 Kifer Road
Sunnyvale, CA 94086
United States
Tel: +1.408.235.7700
www.fortinet.com/sales
EMEA SALES OFFICE
120 rue Albert Caquot
06560, Sophia Antipolis,
France
Tel: +33.4.8987.0510
APAC SALES OFFICE
300 Beach Road 20-01
The Concourse
Singapore 199555
Tel: +65.6513.3730
LATIN AMERICA SALES OFFICE
Prol. Paseo de la Reforma 115 Int. 702
Col. Lomas de Santa Fe,
C.P. 01219
Del. Alvaro Obregón
México D.F.
Tel: 011-52-(55) 5524-8480
Copyright © 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law
trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other
resultsmay vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in
such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal
lab tests. Fortinet disclaims in full any covenants, representations,and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most
current version of the publication shall be applicable.
2
www.fortinet.com